Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: I7cypZVV71q68s3u6hb6Ub3euDcVAkAAqd2dJAcMdNw=
Subject key identifier: 45:85:BF:96:B3:6E:63:F7:91:33:FA:18:68:7A:1F:7D:21:3C:12:49
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 01A0DD97AC441CECB1B31383C3CF05E9EAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 0823
Signing time: Sat 26 Sep 2026 12:01:39 +0000
Manifest this update: Sat 26 Sep 2026 12:01:39 +0000
Manifest next update: Sun 27 Sep 2026 12:01:39 +0000
Files and hashes: 1: F0sSuH9iYHPrHq28J6vj4APvT6M.roa (hash: 2FFuLU5ejEPJNZsPwPlVu1B2UXAql1qbkT9CH1KvKBQ=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: nMTJ7mCRDXXwgTFLrEaq2pQRL6U78Len3Y4iFlMhzf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:ac:44:1c:ec:b1:b3:13:83:c3:cf:05:e9:ea:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Sep 26 12:01:39 2026 GMT
Not After : Sep 27 12:01:39 2026 GMT
Subject: CN=4585bf96b36e63f79133fa18687a1f7d213c1249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:8e:71:5a:73:e5:bd:76:6f:a9:a5:c1:2b:
7e:3c:f0:ed:cd:9c:bc:a3:90:c8:b6:1a:46:ed:21:
83:dc:dd:93:d4:58:97:83:a2:61:c5:73:8f:71:ce:
c4:6f:bc:81:1c:4f:7b:ab:8e:f4:9c:3c:d9:67:53:
1e:b0:a3:ac:f9:79:0d:59:1c:3e:b3:7f:50:f0:cd:
64:ed:0a:0b:f9:4e:c5:d2:bf:6e:c7:9e:30:6a:be:
49:7b:ab:3b:79:be:d8:39:62:2a:e8:a9:76:02:0e:
dc:40:3f:ee:85:ec:14:55:bd:4d:23:b1:06:ac:7f:
42:05:cd:91:d0:57:b2:14:cc:d5:5a:0f:05:8d:26:
58:83:49:7f:02:16:f4:39:21:55:60:47:79:b0:6e:
e1:dd:f4:d4:e1:7c:a9:eb:76:39:0c:a1:34:b2:15:
bc:fe:77:9b:42:51:48:49:e3:5c:b7:4f:c9:45:24:
5d:2e:b1:80:d4:e9:ba:9d:4b:99:71:27:a9:25:e5:
35:d9:d2:b0:37:88:dd:2e:e0:32:32:ff:56:8c:48:
fa:17:d5:05:31:c9:e8:99:9d:d8:4d:99:fe:16:36:
fa:2f:28:af:82:a6:72:12:e1:b0:fc:b3:00:9a:d4:
d7:a4:1b:69:4d:c2:c2:03:0e:4d:16:09:0e:15:69:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:85:BF:96:B3:6E:63:F7:91:33:FA:18:68:7A:1F:7D:21:3C:12:49
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c5:7a:bd:9a:89:3d:dd:75:0c:b6:99:cc:28:25:25:67:1b:
07:0c:cf:3a:74:27:19:df:96:f0:27:1b:c6:81:ae:2b:14:e0:
eb:d8:c5:9d:2c:e3:f3:3b:15:7e:a0:8f:fd:f1:79:91:7f:77:
d5:a3:5c:e0:93:9d:ae:3d:69:14:23:e2:67:d2:fa:fd:23:ad:
f3:0e:fa:71:c1:d9:a8:41:ac:85:d0:fc:77:b5:04:74:3d:d9:
56:ea:6f:6c:9f:3a:d1:c7:7e:9f:e5:c6:7d:15:47:4e:0a:cd:
de:a7:2d:5b:f8:b2:59:61:01:24:c5:c3:22:fb:97:e3:d3:36:
91:58:94:7f:b5:cc:2d:6a:0a:ca:00:c8:22:50:53:d0:92:eb:
4e:33:11:03:0e:50:51:6b:9c:f5:12:5e:44:91:5b:a6:64:2c:
e5:1b:fd:b8:45:31:4a:26:fc:28:22:c2:c7:26:c3:e1:4a:b6:
e4:23:ad:f5:e5:de:fa:4a:9a:c2:a6:db:c5:07:a3:2b:e7:2e:
b7:3f:db:d0:7c:c5:24:e1:c8:51:d1:42:30:7b:ab:91:1c:d3:
28:48:eb:d5:ea:9d:58:2d:99:3d:e9:6b:bc:53:e3:ab:2c:60:
2c:88:12:75:77:aa:d1:33:d2:c3:fc:8c:38:e7:4a:57:cb:77:
7d:b9:66:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:13:55 2026 by rpki-client